diff --git a/.dependabot/config.yml b/.dependabot/config.yml
old mode 100644
new mode 100755
index 3c6e5e1b79..342004e7f2
--- a/.dependabot/config.yml
+++ b/.dependabot/config.yml
@@ -15,12 +15,22 @@ update_configs:
   - package_manager: "javascript"
     directory: "/mobile/js_files"
     update_schedule: "weekly"
+    allowed_updates:
+    - match:
+        update_type: security
     default_reviewers:
     - "jakubgs"
   # Keep /desktop/js_files/yarn.lock up to date, batching pull requests weekly
   - package_manager: "javascript"
     directory: "/desktop/js_files"
     update_schedule: "weekly"
+    allowed_updates:
+    - match:
+        update_type: all
+        dependency_type: direct
+    - match:
+        update_type: security
+        dependency_type: indirect
     default_reviewers:
     - "vkjr"
     - "jakubgs"